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AMENDMENTS TO THE CLAIMS 
Please amend the claims as follows. 

1. (Currently Amended) A method for displaying a web based user interface over a network 
comprising: 

[[a)]] reading an HTTP request for authentication from a browser associated with a user, said 
HTTP request comprising credential information associated with said user; 

[[b)]] invoking a first plug-in module from a plurality of plug-in modules used to 
authenticate said user, said invoking based on said credential information, said 
plurality of plug-in modules providing authentication services; [[and]] 

[[c)]] dynamically generating an authentication user interface based on said HTTP request 
and configuration properties defined by said first plug-in module; and 

customizing said authentication user interface by adding at least one additional plug-in 
module in said plurality of plug-in modules . 

2. (Currently Amended) The method of Claim 1, wherein [[c)]] dynamically generating an 
authentication user interface comprises: 

[Jcl)J] selecting a first web page template from a plurality of web page templates based on 
said credential information and said configuration properties; 

[[c2)]] retrieving additional information from memory to be displayed in said first web page 
template, wherein said first web page template comprises said user interface; and 

[[c3)]I incorporating said additional information into said first web page template. 

3. (Original) The method of Claim 2, further comprising: 

configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface. 
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4. (Original) The method of Claim 2, farther comprising: 

customizing said authentication user interface by modifying at least one of said plurality of 
web page templates. 

5. (Cancelled) 

6. (Currently Amended) The method of Claim 1, wherein [[a)]] reading an HTTP request for 
authentication further comprises: 

[[al)]] receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 

7. (Original) The method of Claim 6, wherein said login request comprises: 

URL information; and 

query information comprising at least one URL parameter attached to said URL information, 
said query information comprising said credential information. 

8. (Original) The method of Claim 1 , further comprising: 

sending said authentication user interface to said browser over said network. 

9. (Currently Amended) The method of Claim 1 , further comprising: 

[[d)]] validating authentication of said user; and 

[[e)]] generating a session token associated with said user, said session token authorizing 
access to services and content by said user, said session token also comprising said 
credential information and any additional credential information discovered when 
authenticating said user. 

10. (Currently Amended) A method for displaying a web based graphical user interface (GUI) over 
a network comprising: 

[[a)]| receiving an HTTP request for a first service from a browser associated with a user, 
said HTTP request comprising credential information associated with said user; 
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[[b)]] invoking a first plug-in module from a plurality of plug-in modules, said invoking 
based on said credential information, said plurality of plug-in modules providing a 
plurality of services; [[and]] 

[[c)J] dynamically generating a first web based GUI based on said HTTP request and 
configuration properties defined by said first plug-in module; 

requesting additional credential information from said user: 

receiving said additional credential information from said user; and 

dynamically generating a second web based GUI based on said additional credential 
information and said configuration properties . 

11. (Original) The method of Claim 10, wherein said first service is an authentication service. 

12. (Cancelled) 

13. (Currently Amended) The method of Claim 10, wherein [[c)]] dynamically generating a first 
web based GUI further comprises: 

[[cl)]] detecting a client type of said browser; and 

[[c2)]] configuring said first web based GUI to be supportable by said client type. 

14. (Currently Amended) The method of Claim 10, wherein said receiving an HTTP request [[in 
a)]], said invoking a first plug-in module [[in b)]] and said dynamically generating a first web 
based GUI I[in c)]] substantially complies with the J2EE Assisted Take-Off (JATO) 
specification. 

15. (Original) The method of Claim 10, further comprising: 

customizing said first GUI by modifying said configuration properties in said first plug-in 
module. 

16. (Original) The method of Claim 10, further comprising: 

sending said GUI to said browser. 
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17. (Original) A system for displaying a web based user interface over a network comprising: 

a web based user interface module for receiving an HTTP request over said network and 
dynamically generating a first user interface based on said HTTP request and 
configuration properties of a selected plug-in module; 

a plurality of plug-in modules coupled to said web based user interface module, each of said 
plurality of plug-in modules providing web services; and 

a model module coupled to said web based user interface module and said plurality of plug- 
in modules, said model module for selecting said selected plug-in module based on 
said HTTP request and for providing an interface between said web based user 
interface module and said plurality of plug-in modules. 

18. (Original) The system of Claim 17, wherein said web based user interface module comprises: 

a controller for selecting a first view renderer module from a plurality of view Tenderer 
modules based on credential information provided in said HTTP request, said 
credential information associated with a user sending said HTTP request; 

said plurality of view renderer modules coupled to said controller, each of said plurality of 
view renderer modules controlling the distribution of content to a plurality of web 
page templates; and 

said plurality of web page templates. 

19. (Original) The system of Claim 17, wherein said model module comprises: 

an application program interface (API) layer for interfacing with said web based user 
interface; 

an service provider interface (SPI) layer coupled to said plurality of plug-in modules for 

interfacing with said plurality of plug-in modules; 
a Java Authenticating and Authorization Service (JAAS) API layer coupled to said API layer 

for providing server authentication services; 
a JAAS service provider interface (SPI) layer coupled to said SPI layer for providing an 

interface between said plurality of plug-in modules and said JAAS API; and 
a framework layer for interfacing between said API layers and said SPI layers. 
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20. (Currently Amended) A computer system comprising: 

a processor; and 

a computer readable memory coupled to said processor and containing program instructions 

that, when executed, implement a method for displaying a web based user interface 

over a network comprising: 
[[a)]] reading an HTTP request for authentication from a browser associated with a user, said 

HTTP request comprising credential information associated with said user; 
[[b)]] invoking a first plug-in module from a plurality of plug-in modules used to 

authenticate said user, said invoking based on said credential information, said 

plurality of plug-in modules providing authentication services; and 
I[c)]] dynamically generating an authentication user interface based on said HTTP request 

and configuration properties defined by said first plug-in modul e; and 
customizing said authentication user interface by adding at least one additional plug-in 

module in said plurality of plug-in modules . 

21. (Currently Amended) The computer system of Claim 20, wherein [[c)]] dynamically generating 
an authentication user interface in said method comprises: 

[[cl)]] selecting a first web page template from a plurality of web page templates based on 
said credential information and said configuration properties; 

[[c2)]| retrieving additional information from memory to be displayed in said first web page 
template, wherein said first web page template comprises said user interface; and 

[[c3)]] incorporating said additional information into said first web page template. 

22. (Original) The computer system of Claim 21, wherein said method further comprises: 

configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface. 
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23. (Original) The computer system of Claim 21 , wherein said method further comprises: 

customizing said authentication user interface by modifying at least one of said plurality of 
web page templates. 

24. (Cancelled) 

25. (Currently Amended) The m e thod computer system of Claim 20, wherein [[a)]] reading an 
HTTP request for authentication further comprises: 

[[al)]] receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 

26. (Original) The computer system of Claim 25, wherein said login request comprises: 

URL information; and 

query information comprising at least one URL parameter attached to said URL information, 
said query information comprising said credential information. 

27. (Original) The computer system of Claim 20, wherein said method further comprises: 

sending said authentication user interface to said browser over said network. 

28. (Currently Amended) The computer system of Claim 20, wherein said method further 
comprises: 

[[d)]] validating authentication of said user; and 

[[e)]] generating a session token associated with said user, said session token authorizing 
access to services and content by said user, said session token also comprising said 
credential information discovered when authenticating said user. 

29. (New) A method for displaying a web based user interface over a network comprising: 

reading an HTTP request for authentication from a browser associated with a user, said 
HTTP request comprising credential information associated with said user; 

invoking a first plug-in module from a plurality of plug-in modules used to authenticate said 
user, said invoking based on said credential information, said plurality of plug-in 
modules providing authentication services; 
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dynamically generating an authentication user interface based on said HTTP request and 
configuration properties defined by said first plug-in module, wherein dynamically 
generating an authentication user interface comprises: 

selecting a first web page template from a plurality of web page templates based on 
said credential information and said configuration properties; 

retrieving additional information from memory to be displayed in said first web page 
template, wherein said first web page template comprises said user interface; 
and 

incorporating said additional information into said first web page template; and 
configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface. 

30. (New) The method of Claim 29, further comprising: 

customizing said authentication user interface by modifying at least one of said plurality of 
web page templates. 

31. (New) The method of Claim 29, wherein reading an HTTP request for authentication further 
comprises: 

receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 



